Basic ROP Techniques and Tricks Intro During assessments, we’ll occasionally run across custom binaries. Since...

This post explores how to use the new OOAnalyzer Ghidra Plugin to import C++ class information into the NSA's Ghidra tool and interpret results in the Ghidra SRE framework.

ID: CVE-2019-12815
Title: ProFTPd mod_copy - arbit...

Interesting apt report collection and some special ioc express - blackorbird/APT_REPORT

‘If you report a security issue, at least update your Linux distribution’

In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Sivathmican Sivakumaran and John Simpson of the Trend Micro Research Team detail a recent code execution vulnerability in Adobe ColdFusion. The bug was originally discovered…

Malicious Macro Generator. Contribute to Mr-Un1k0d3r/MaliciousMacroGenerator development by creating an account on GitHub.

Contribute to mortychannel/lnkexploit development by creating an account on GitHub.

One of the benefits of being a developer is that you can guess how stuff is working at the server end. You can try to debug how the…

Using Drozer, we identified com.nextcloud.client is vulnerable to Sql Injection
here is output from drozer:

dz> run scanner.provider.injection -a com.nextcloud.client
Scanning...

While waiting for a download to complete, I stumbled across an interesting blogpost. The author describes a flaw in LibreOffice that allowed an attacker to execute code. Since this was quite recent, I was interested if my version is vulnerable to this attack…

Profiling RDP Clients with JA3 and RDFP

For some time I’ve wanted to play with coverage-guided fuzzing. I decided to have a go at the Linux Kernel netlink machinery. It's a good target: it's an obscure part of kernel, and it's relatively easy to automatically craft valid messages.

C# Script used for Red Team. Contribute to Mr-Un1k0d3r/RedTeamCSharpScripts development by creating an account on GitHub.